ABSTRACT 

Methods and apparatuses associated with sharing cryptographic keys in a network 
domain. An embedded agent on a network endpoint participates in the distribution of 
cryptographic keys. In one embodiment the embedded agent receives and stores a shared 
symmetric key, as do embedded agents on other network endpoints in the same network domain. 
The embedded agent causes the shared key to be stored in a secure storage not directly accessible 
by the host. When the host wants to transmit enciphered data, the embedded agent may provide 
access to cryptographic services. The embedded agent provides isolation of the shared key from 
parts of the host that are subject to compromise by attack or infection. 
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